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100. PROSPECTIVE OPERATOR ENABLES THE BIOMETRIC 
AUTHENTICATION DEiVICE 20 TO AUTHENTICATE HIM OR 

HERSELF, IN THE PROCESS PROVIDING AN IDENTIFIER 



NO 



101. BIOMETRIC AUTHENTICATION DEVICE 20 DETERMINES 
WHETHER PROSPECTIVE OPERATOR IS AUTHENTICATED 



|yes 



102. BIOMETRIC AUTHENTICATION DEVICE 20 PROVIDES 
A NOTIFICATION TO THE CREDENTIAL INFORMATION 
GENERATOR 23 ALONG WITH THE PROSPECTIVE 
OPEFJATOR'S IDENTIFIER 



103. CREDENTIAL INFORMATION GENERATOR 23 
GENERATES CREDENTIALS FOR THE PROSPECTIVE 

OPERATOR AND PROVIDES THEM 
TO THE CREDENTIAL INFORMATION DISTRIBUTOR 24 



104. CREDENTIAL INFORMATION DISTRIBUTOR 24 
GENERATES MESSAGE PACKETS INCLUDING 
THE SHORT-TERM CREDENTIALS AND OPERATOR IDENTIFIER 
FOR TRANSMISSION TO THE COMPUTERS 11(n) THAT THE 
PROSPECTIVE OPERATOR WILL BE AUTHORIZED TO UTILIZE 



® 



FIG. 2 
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(B) 0 

105. CREDENTIAL NFORMATION DISTRIBUTOR 24 
TRANSMITS THE MESSAGE PACKETS THROUGH SECURE 

CHANNELS OVER THE COMMUNICATION LINK 13 



106. CREDENTIAL INFORMATION GENERATOR 23 
PROVIDES THE GENERATED CREDENTIALS 

TO THE PROSPECTIVE OPERATOR 



107. BIOMETRIC AUTHENTIC 
THE DISPLAY 25 TO DISP 
^ TOTHEPROSPEC 


NATION DEVICE 20 ENABLES 
LAY A SUITABLE NOTICE 
:TIVE OPERATOR 




r 


108. BIOMETRIC AUTHENTICATION DEVICE 20 GENERATES 
AN APPRCiPRIATE NOTIFICATION 
^ FOR TRANSMISSION TO A SYSTEM ADMINISTRATOR 



FIG. 2A 
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120. THE PROSPECTIVE OPERATOR INITIALLY LOGS ON 

AND PROVIDES HIS OR HER IDENTIFIER AND 
THE SHORT-TERM CREDENTIALS RECEIVED IN STEP 106 




r 


121. COMPUTER 11(n) DETI 
SHORT-TERM CREDENTI) 
IDENTIFIER PROVIDED BYT 


ERMINES WHETHER IT HAS ^ 
iVLS FOR THE OPERATOR 
HE OPERATOR IN STEP 120 



122. COMPUTER 11(n) DETERMINES WHETHER THE SHORT- 
TERM CREDENTIALS THAT IT HAS FOR THE OPERATOR 
IDENTIFIER PROVIDED BY THE OPERATOR HAVE NOT EXPIRED 



NO 



123. COMPUTER 11(n) PROCESSES THE SHORT-TERM 
CREDENTIALS AS PROVIDED BY THE OPERATOR IN RELATION 
TO THE SHORT-TERM CREDENTIALS AS PROVIDED 
BY THE HIGH-SECURITY AUTHENTICATION DEVICE 12 
FOR THE IDErJTIFIER THAT WAS PROVIDED 
BY THE PROSPECTIVE OPERATOR TO DETERMINE 
WHETHER THE SHORT-TERM CREDENTIALS CORRESPOND 



uYES 



124. COMPUTER 11 (n) ALLOWS 
THE PROSPECTIVE OPERATOR TO UTILIZE IT 
AS AN OPERATOR 



125. COMPUTER 1 1(n) PERFORMS OTHER OPERATIONS 
IN CONNECTION WITH THE RESPECTIVE DETERMINATION 



FIG. 3 



